Skip to main content

API Authentication

Authenticate with API tokens or OAuth 2.0. Manage scopes and rotate keys.

4 min readapiauthoauth

API Tokens

Generate a token in Settings → API Tokens. Include in the Authorization header: `Bearer <token>`.

OAuth 2.0

Use client credentials flow for server-to-server. Authorization code flow for user-delegated access.

Scopes

Tokens can be scoped: read:recons, write:recons, read:breaks, admin, etc.